Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3332203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33322d3332203d3e20323639353339.roa (raw, json)
Hash identifier:          j/XsJiSQbldiNh2rR9IB/w431Nic8wxPyo+myBS+QlE=
Subject key identifier:   70:4B:C4:01:2C:BF:A0:62:99:6B:D2:9D:20:1E:5E:94:63:3F:82:81
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       05A0DB4B4BBEDBC718D27DB7EEDBDF1ADBAD710D
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3332203d3e20323639353339.roa
Signing time:             Thu 07 Mar 2024 17:41:34 +0000
ROA not before:           Thu 07 Mar 2024 17:36:34 +0000
ROA not after:            Thu 06 Mar 2025 17:41:34 +0000
asID:                     269539
IP address blocks:        2804:662c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:db:4b:4b:be:db:c7:18:d2:7d:b7:ee:db:df:1a:db:ad:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Mar  7 17:36:34 2024 GMT
            Not After : Mar  6 17:41:34 2025 GMT
        Subject: CN=704BC4012CBFA062996BD29D201E5E94633F8281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:83:9b:e1:76:b2:94:ce:4b:ed:52:4a:74:
                    99:d1:73:46:74:3e:9d:36:9b:2e:08:9d:cc:87:c5:
                    e1:09:ca:a3:28:0b:e5:1a:12:cd:bb:33:19:ce:1d:
                    32:4b:28:62:1c:cd:f2:22:3f:c9:d8:0b:04:0b:23:
                    06:e4:8f:76:7a:30:9d:67:82:a7:c1:63:a5:9a:44:
                    2c:83:ee:4b:0d:66:cf:52:6c:31:94:43:fa:82:de:
                    98:94:4e:d8:84:a0:70:8d:3e:87:36:1e:49:b4:03:
                    34:61:5e:08:39:b5:c9:37:89:62:71:dc:df:74:84:
                    3c:df:f7:54:e7:4f:1a:f2:18:f6:ef:f1:d1:d5:aa:
                    64:46:b9:2e:9a:4a:2d:4d:4b:8a:92:ae:38:52:6e:
                    7f:67:d9:ad:65:3e:b7:ab:f5:5d:48:e7:86:21:c0:
                    70:b5:74:6e:c5:ce:3a:a7:c8:a9:20:68:74:e0:1b:
                    25:48:36:c7:e1:88:49:24:cf:e8:66:e7:c1:11:bb:
                    6c:3f:d2:21:f9:a1:fa:ca:7b:ac:2e:15:11:56:e3:
                    2f:f6:57:13:2c:8a:0c:e5:dc:84:50:93:37:50:92:
                    fa:5c:ca:7e:16:b0:08:4c:94:eb:51:01:28:51:d7:
                    05:eb:d3:80:47:8d:4a:8e:1f:76:86:4c:e6:d2:06:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:C4:01:2C:BF:A0:62:99:6B:D2:9D:20:1E:5E:94:63:3F:82:81
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3332203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:d1:dd:b3:e9:86:2d:62:8a:ee:e1:7d:e2:57:f1:81:dd:
         a6:06:e3:64:e0:7c:51:f6:6f:61:c6:e5:54:97:bf:b4:07:68:
         3e:79:bf:45:0b:06:27:8d:0a:3d:6d:79:96:6a:12:41:b1:d1:
         9b:88:4b:7c:b0:77:06:92:56:e1:3c:35:1f:66:2e:32:a6:ac:
         7d:70:34:09:c9:da:ee:39:27:74:e5:97:f1:66:48:d1:3e:7e:
         6f:78:2c:59:0a:b0:71:4a:91:4d:61:65:26:84:c0:3d:f1:37:
         74:4f:b1:fd:8a:7e:dd:60:fe:50:79:51:c5:f0:93:a0:58:46:
         e1:d0:e2:fc:09:24:d7:52:cf:66:2f:97:dc:3f:6a:b8:99:a5:
         e3:f2:2f:16:64:35:50:3f:21:d3:df:a6:06:fc:08:48:12:d1:
         fd:44:8b:2b:3e:64:8a:9b:cf:8b:2f:dd:b6:bf:ec:24:fa:84:
         ed:ae:98:02:5a:a1:1a:8e:66:83:cc:9b:b3:2f:37:5d:a0:7e:
         51:38:a8:90:02:2b:be:ce:89:10:e3:09:22:cc:61:63:4b:a6:
         84:c0:f9:df:3b:5a:c0:ca:74:6a:eb:77:32:22:39:8e:fa:33:
         83:c8:ac:a6:57:d4:51:77:dc:f0:49:3d:f9:3d:fb:b1:42:82:
         47:80:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org